Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File:                     YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier:          QkcEC5qdPatGANDt7a8aP4K46pnlNawaxC/c8Xr5Loc=
Subject key identifier:   DB:FC:80:79:83:02:7A:88:29:64:DE:FA:57:83:11:86:30:F2:BD:EF
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer:       /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial:       019E92137B28FC3C137A97B96E7BF4F9AB99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number:          092B
Signing time:             Thu 04 Jun 2026 10:00:10 +0000
Manifest this update:     Thu 04 Jun 2026 10:00:10 +0000
Manifest next update:     Fri 05 Jun 2026 10:00:10 +0000
Files and hashes:         1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
                          2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: THPLdiMR7sd2Aizr58u6+MmzZsfsu3hPA5Ejk4cWEOI=)
                          3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:13:7b:28:fc:3c:13:7a:97:b9:6e:7b:f4:f9:ab:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
        Validity
            Not Before: Jun  4 10:00:10 2026 GMT
            Not After : Jun  5 10:00:10 2026 GMT
        Subject: CN=dbfc807983027a882964defa5783118630f2bdef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1c:03:59:de:e4:c3:ad:93:ee:c9:d5:42:64:
                    59:60:7c:63:8a:9c:a9:8b:da:02:39:22:d9:04:f1:
                    da:9a:8c:1e:d7:dc:b3:d7:91:32:4a:c4:3f:fa:90:
                    2d:bf:71:97:67:e8:88:a5:ce:1a:74:06:73:90:9f:
                    a3:d9:60:bf:80:e9:c2:24:e4:c4:6a:c0:d7:c7:73:
                    7c:98:9b:cd:67:da:d5:92:1d:78:5d:ca:ca:7f:6a:
                    af:e1:42:c9:fe:e8:85:fe:f4:d3:4d:ef:85:2e:d3:
                    04:95:55:50:c9:fe:81:4a:bb:87:ab:9f:4a:3c:c1:
                    a5:fd:ea:a4:79:b4:77:96:44:56:a3:29:c2:67:ca:
                    91:dc:a4:9b:bd:2d:af:fa:77:6d:3a:73:14:fb:a9:
                    21:30:80:b1:c5:53:07:63:4b:dc:35:2b:32:a2:45:
                    8a:57:f5:36:f2:17:15:03:3e:d7:f9:ad:47:c2:5d:
                    46:dd:3c:ab:7d:38:d8:d0:8c:a1:34:5a:cd:f2:d7:
                    33:81:5e:36:3c:46:06:6c:a3:2b:77:43:12:36:25:
                    4f:8b:7c:d6:c1:0b:7c:c0:0f:4f:c6:8c:6d:cf:77:
                    45:15:77:4a:36:99:22:b7:6a:2f:34:17:f3:9e:b3:
                    e3:2f:04:9d:a3:5c:a4:84:21:e3:25:f0:b4:db:5f:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FC:80:79:83:02:7A:88:29:64:DE:FA:57:83:11:86:30:F2:BD:EF
            X509v3 Authority Key Identifier:
                keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c1:c9:ea:e7:1d:13:6b:41:2e:2c:74:1e:18:bc:56:04:77:
         27:38:07:27:29:71:ad:5a:13:0e:50:62:7a:fd:79:62:99:55:
         9c:b2:63:54:68:e7:d2:54:df:2c:ce:a2:d0:dd:72:4c:94:2d:
         d8:5b:75:d5:80:55:10:2a:95:49:26:f0:27:c2:67:17:e0:01:
         f7:76:3a:0e:b2:0d:7f:a6:e9:5a:6f:97:13:83:eb:36:86:33:
         ca:f3:04:7a:90:34:8c:b8:7b:86:72:8c:5e:dc:de:f6:87:01:
         7f:ce:5a:b5:5c:ab:7e:84:45:db:61:6d:5c:14:96:23:29:f2:
         79:2f:a8:b8:80:95:40:a2:24:a9:dc:79:25:cd:e8:b9:c4:42:
         4e:d8:03:5c:63:c1:bf:61:cd:b0:f8:b4:51:bc:9f:89:0a:46:
         36:39:f7:42:98:bc:58:49:b1:7e:df:e0:4e:a4:56:93:7d:ad:
         3f:32:c1:9b:8c:9e:1b:92:6e:68:fe:92:c1:1d:d2:b6:58:05:
         f7:3a:db:64:79:b6:e6:00:d6:95:05:11:45:73:c7:23:02:6c:
         aa:48:17:19:f5:21:95:75:42:29:e7:83:6a:d3:44:76:be:59:
         75:03:2f:ca:3a:75:91:11:40:22:da:ca:f2:fc:21:2e:92:2c:
         c8:08:ad:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:26:36 2026 by rpki-client